Defensive Coding Against Information Disclosure CASENET Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A security analyst notices a high volume of 500 errors in the application logs, but the errors are all different and do not match a known attack pattern. The analyst suspects a misconfigured load balancer is causing intermittent failures. What is the most effective way to confirm this hypothesis?

   • AIncrease the logging level to Trace for all applications to capture more details about each error.
   • BBlock all requests from the IP addresses that generate the 500 errors.
   • CCorrelate the 500 errors with load balancer health check logs and server metrics to see if they occur when a specific backend is marked unhealthy.
   • DRestart the load balancer to clear any temporary configuration issues.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security operations team wants to detect attackers probing an ASP.NET application for SQL injection vulnerabilities. The application logs all exceptions, but there is no monitoring. Which approach would best help detect such probing?

   • ALog all user input and review it manually at the end of each week.
   • BEnable detailed error messages in the response so that attackers see the SQL error and stop probing.
   • CConfigure an alert that triggers when the number of SQL-related exceptions per minute exceeds a threshold.
   • DBlock all requests that contain the word 'SELECT' in the query string.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A .NET Core application has a global exception handler that returns a generic error message. However, when an exception occurs inside a background service (IHostedService), the exception is not caught by the global handler and the service crashes. The team wants to prevent crashes and log the exception without exposing details to users. What is the best approach?

   • ALet the service crash and rely on the process supervisor to restart it, logging the crash to the event log.
   • BUse a custom middleware to catch exceptions from background services.
   • CRely on the global exception handler to catch exceptions from background services as well.
   • DWrap the background service's execution loop in a try-catch that logs the exception and continues or restarts the service.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Why is it important to store logs outside the web root directory?

   • ATo reduce the disk space used by the application
   • BTo ensure logs are automatically backed up
   • CTo make it easier for developers to access the logs
   • DTo prevent logs from being downloaded directly via a web browser
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which measure is essential for secure log storage?

   • AGranting write access to all authenticated users for log files
   • BRestricting access to log files to authorized personnel only
   • CStoring logs in plain text to ensure readability
   • DStoring logs in the application's web root for easy access
   Reveal Solution Discussion Select an answer first